Tamper-evident storage preserves records in a way that makes unauthorized changes detectable. It does not necessarily prevent alteration; instead, integrity mechanisms such as cryptographic hashes, digital signatures, append-only logs, or trusted timestamps can reveal whether data was modified or deleted.
In cyber security, this matters for logs and audit records used to investigate incidents or reconstruct decisions. For an AI agent, a protected record may help show what information it accessed, which policy or authority applied, and what action followed. Defenders should combine tamper evidence with access controls, secure backups, and monitoring, since missing records or compromised signing keys can still undermine an audit trail.